Browse All CVEs
3,395 vulnerabilities matching filters.
| CVE | Severity | CVSS | EPSS | First Seen | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2025-30046 |
critical | 9.0 | 0.0026 | 2026-10-29 | In the CGM CLININET application server, multiple processes responsible for HL7 communicati | |
CVE-2025-30047 |
critical | 9.4 | 0.0038 | 2026-10-29 | CGM CLININET is vulnerable to Remote Code Execution caused by deserialization of untrusted | |
CVE-2025-30050 |
critical | 9.4 | 0.0022 | 2026-10-29 | CGM CLININET is vulnerable to Code Injection in the RunCGI.pm component, which dynamically | |
CVE-2025-30054 |
critical | 9.3 | 0.0010 | 2026-10-29 | CGM CLININET is vulnerable to local privilege escalation. The service that processes incom | |
CVE-2026-112860 |
critical | 9.3 | 0.0032 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-112862 |
critical | 9.8 | 0.0041 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in xnau webdesign Participants Database pa | |
CVE-2026-25784 |
critical | 9.3 | 0.0034 | 2026-10-29 | Initialization of a Resource with an Insecure Default vulnerability in Hallo Welt! GmbH Bl | |
CVE-2026-107685 |
critical | 9.1 | 0.0027 | 2026-10-29 | Improper Certificate Validation vulnerability in the WebSocket streaming client in agentji | |
CVE-2026-115727 |
critical | 9.2 | 0.0070 | 2026-10-29 | AgenticSeek before commit 409840c contains a remote code execution vulnerability because l | |
CVE-2026-112846 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Save Life save-life allo | |
CVE-2026-112847 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX ZenSoul zensoul allows Object | |
CVE-2026-112848 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in AivahThemes Hostme v2 hostmev2 allows O | |
CVE-2026-112851 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX Group HotLock hotlock allows O | |
CVE-2026-112853 |
critical | 9.8 | 0.0041 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allow | |
CVE-2026-112854 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-ce | |
CVE-2026-112855 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Inj | |
CVE-2026-112856 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Vagabonds vagabonds allo | |
CVE-2026-112857 |
critical | 9.8 | 0.0041 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Obje | |
CVE-2026-112858 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object | |
CVE-2026-112859 |
critical | 9.8 | 0.0031 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in ThemeREX Group Little Birdies little-bi | |
CVE-2026-57116 |
critical | 9.8 | 0.0042 | 2026-10-29 | PraisonAI is a multi-agent teams system. From version 4.2.1 to before version 4.6.59, Prai | |
CVE-2026-98959 |
critical | 9.8 | 0.0061 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: btrfs: fix xattr repl | |
CVE-2026-99078 |
critical | 9.8 | 0.0046 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent st | |
CVE-2026-99079 |
critical | 9.8 | 0.0046 | 2026-10-29 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Prevent st | |
CVE-2026-53921 |
critical | 9.8 | 0.0112 | 2026-10-29 | 2 PoC | odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. Prior to ve |
CVE-2026-46651 |
critical | 9.8 | 0.0038 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-46652 |
critical | 9.8 | 0.0070 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-53942 |
critical | 9.9 | 0.0032 | 2026-10-29 | Conda Organization Infrastructure is a centralized location for infrastructure codes. Prio | |
CVE-2026-55486 |
critical | 9.3 | 0.0026 | 2026-10-29 | The Goobi viewer is a web application that allows digitised material to be displayed in a | |
CVE-2026-115812 |
critical | 9.3 | 0.0053 | 2026-10-29 | Relative path traversal during model archive extraction in Amazon Web Services Multi Model | |
CVE-2026-115889 |
critical | 9.9 | 0.0045 | 2026-10-29 | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler | |
CVE-2026-115893 |
critical | 9.9 | 0.0099 | 2026-10-29 | 1 PoC | Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift |
CVE-2026-115931 |
critical | 9.9 | 0.0049 | 2026-10-29 | Postiz lets a signed-in user ask the backend to run a function on one of their connected c | |
CVE-2026-115806 |
critical | 9.8 | 0.0055 | 2026-10-29 | The Prime Mover – Backup and Migration plugin for WordPress is vulnerable to PHP Object In | |
CVE-2026-110956 |
critical | 9.8 | 0.0036 | 2026-10-29 | The asVereinbase WordPress plugin before 1.1.8 does not require a valid password or a gen | |
CVE-2026-111402 |
critical | 9.3 | 0.0035 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-112866 |
critical | 9.3 | 0.0036 | 2026-10-29 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne | |
CVE-2026-114196 |
critical | 9.8 | 0.0045 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in paytiumsupport Paytium paytium allows O | |
CVE-2026-94075 |
critical | 9.8 | 0.0045 | 2026-10-29 | Deserialization of Untrusted Data vulnerability in Tribulant Software Newsletters newslett | |
CVE-2026-116014 |
critical | 9.2 | 0.0043 | 2026-10-29 | open62541 1.5.0 before 1.5.7 contains an integer overflow in UA_DataType_fromStructureDesc | |
CVE-2026-115932 |
critical | 9.6 | 0.0043 | 2026-10-29 | When a post is published, Postiz treats a media path that is not a web address as a file o | |
CVE-2026-115557 |
critical | 9.4 | 0.0053 | 2026-10-29 | Python has added a denylist for known compromised certificates to the "ssl" module to ensu | |
CVE-2026-115933 |
critical | 9.9 | 0.0025 | 2026-10-29 | Postiz signs its session, invitation and password reset tokens with one shared secret and | |
CVE-2026-114820 |
critical | 9.1 | 0.0025 | 2026-10-29 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edi | |
CVE-2026-115995 |
critical | 9.4 | 0.0138 | 2026-10-29 | A security vulnerability has been detected in Unitree Robotics Unitree Go2 up to 1.1.11.4. | |
CVE-2026-115214 |
critical | 9.8 | 0.0028 | 2026-10-29 | The Datawiza Proxy Auth Plugin WordPress plugin before 1.1.1 does not verify that the use | |
CVE-2026-116163 |
critical | 9.1 | 0.0028 | 2026-10-29 | Parse Server before 8.6.102 and 9.0.0 before 9.10.5-alpha.2 contains an authentication byp | |
CVE-2026-116199 |
critical | 9.2 | 0.0032 | 2026-10-29 | Snipe-IT before 8.6.3 contains an authentication bypass in GoogleAuthController::handleGoo | |
CVE-2026-116116 |
critical | 9.3 | 0.0009 | 2026-10-29 | A vulnerability was detected in Yoosee GM8135S Camera 21.00.01.36. Affected is an unknown | |
CVE-2026-116231 |
critical | 9.4 | 0.0044 | 2026-10-29 | A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element |